Privacy Policy

Last updated: April 21, 2026

1. Introduction

SVG Video Graphics Ltd., operating as SvG Studio Pro ("we," "us," or "our"), is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. This policy complies with the Personal Information Protection Act (PIPA) of British Columbia and the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada. We collect and process personal information based on your consent and as necessary to provide our services and fulfill our contractual obligations.

2. Information We Collect

a) Information you provide directly:

• Account registration information (studio name, email, username)
• Billing and payment information (processed securely via Stripe)
• Business information (company details, address, tax numbers)
• Content you create (clients, invoices, contracts, questionnaires)
• Communications with support

b) Information collected automatically:

• Session data and authentication tokens
• Usage patterns and feature interactions
• Browser type, IP address, device information

3. How We Use Your Information

• Provide, operate, and maintain the Service
• Process payments and subscriptions
• Send transactional emails (invoices, reminders, notifications)
• Provide customer support
• Improve the Service
• Comply with legal obligations

4. Data Isolation & Multi-Tenancy

Each user's data is fully isolated within a multi-tenant architecture. Only authorized users within your account can access your data. Other users cannot access, view, or modify your information.

5. How We Share, Transfer, or Disclose Your Data

We do not sell, rent, trade, or share personal data or Google user data with third parties, except strictly as necessary to operate the Service as described below.

We share limited data only with the following service providers:

• Stripe, Inc. (USA) — Payment processing
• DigitalOcean, LLC (USA) — Hosting and database storage
• Amazon Web Services (AWS SES) (USA) — Email delivery
• Replit, Inc. (USA) — File storage
• Google LLC — Gmail API for sending emails

All providers are contractually required to protect your data and only process it for service functionality. We may also disclose information if required by law or during a business transfer (merger, acquisition, etc.), where the receiving entity agrees to this policy.

5a. Google User Data — Limited Use Disclosure

SvG Studio Pro complies with the Google API Services User Data Policy, including the Limited Use requirements.

Data Sharing, Transfer, and Disclosure of Google User Data:

We do not share, transfer, disclose, or sell Google user data to any third parties under any circumstances, except:

• As necessary to provide the core functionality of the Service (for example, sending emails via the Gmail API on your behalf)
• To comply with applicable laws, regulations, legal processes, or enforceable governmental requests
• In the event of a merger, acquisition, or sale of assets, where the receiving entity agrees to this Privacy Policy

We do not use Google user data for advertising, profiling, or any unrelated purposes.

What Google data we access:

• Gmail address and basic account info
• Permission to send email via Gmail API (gmail.send scope)

How we use it:

• Only to send emails you initiate
• OAuth tokens are securely encrypted and stored

We do NOT:

• Read email content (unless required by law or explicit consent)
• Use data for AI/ML training
• Share data beyond stated purposes

You may revoke access anytime via Google account settings.

6. Data Residency & International Transfers

Your data may be stored and processed outside Canada, including in the United States (via DigitalOcean, AWS, Replit, and Google). As a result, your data may be subject to foreign laws, including lawful access requests by government authorities.

7. Data Security

• bcrypt password hashing
• Secure HTTP-only cookies
• HTTPS encryption
• Rate limiting protections
• Database-level isolation

8. Your Rights (PIPA & PIPEDA)

You have the right to access, correct, withdraw consent, and file complaints with privacy authorities.

9. Subscriber Responsibility

You are responsible for ensuring lawful collection and use of your clients' data, including obtaining consent and complying with applicable laws.

10. Data Retention

We retain data while your account is active. After cancellation, data is retained for 30 days, then permanently deleted.

11. Cookies

We use only essential cookies required for authentication and service functionality. You may disable cookies, but the Service may not function properly.

12. Children's Privacy

Our Service is not intended for users under the age of 13.

13. Data Breach Notification

In the event of a data breach that poses a real risk of significant harm, we will notify affected users and relevant authorities as required by law.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated in advance via the Service or email.

15. Contact

SVG Video Graphics Ltd.
British Columbia, Canada
Email: info@svgpro.ca